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- The MAILING DATE of this communication appears on the cover sheet with the correspondence address-- 

All claims being allowable, PROSECUTION ON THE MERITS IS (OR REMAINS) CLOSED in this application. If not included 
herewith (or previously mailed), a Notice of Allowance (PTOL-85) or other appropriate communication will be mailed in due course. THIS 
NOTICE OF ALLOWABILITY IS NOT A GRANT OF PATENT RIGHTS. This application is subject to withdrawal from issue at the initiative 
of the Office or upon petition by the applicant. See 37 CFR 1.313 and MPEP 1308. 

1 . ^ This communication is responsive to 10/17/2001 . - 

2. ^ The allowed claim(s) is/are 7-78 . 

3. M The drawings filed on 17 October 2001 are accepted by the'Examiner. 

4. □ Acknowledgment is made of a claim for foreign priority under 35 U.S.C. § 119(a)-(d) or (f). 

a) □ All b) □ Some* c) □ None of the: 

1. □ Certified copies of the priority documents have been received. 

2. □ Certified copies of the priority documents have been received in Application No. . 

3. □ Copies of the certified copies of the priority documents have been received in this national stage application from the 

International Bureau (PCT Rule 17.2(a)). 
* Certified copies not received: . 

Applicant has THREE MONTHS FROM THE "MAILING DATE" of this communication to file a reply complying with the requirements 
noted below. Failure to timely comply will result in ABANDONMENT of this application. 
THIS THREE-MONTH PERIOD IS NOT EXTENDABLE. ' 

5. □ A SUBSTITUTE OATH OR DECLARATION must be submitted. Note the attached EXAMINER'S AMENDMENT or NOTICE OF 

INFORMAL PATENT APPLICATION (PTO-152) which gives reason(s) why the oath or declaration is deficient. 

6. □ CORRECTED DRAWINGS ( as "replacement sheets") must be submitted. 

(a) □ including changes required by the Notice of Draftsperson's.Patent Drawing Review ( PTO-948) attached 

1 ) □ hereto or 2) □ to Paper No./Mail Date . 

(b) □ including changes required by the attached Examiner's Amendment / Comment or in the Office action of 

Paper No./Mail Date . 

Identifying indicia such as the application number (see 37 CFR 1.84(c)) should be written on the drawings in the front (not the back) of 
each sheet. Replacement sheet(s) should be labeled as such in the header according to 37 CFR 1.121(d). 

7. □ DEPOSIT OF and/or INFORMATION about the deposit of BIOLOGICAL MATERIAL must be submitted. Note the 

attached Examiner's comment regarding REQUIREMENT FOR THE DEPOSIT OF BIOLOGICAL MATERIAL 



Attachment(s) 

1 . H Notice of References Cited (PTO-892) 5. □ Notice of Informal Patent Application (PTO-152) 

2. □ Notice of Draftperson's Patent Drawing Review (PTO-948) 6. □ Interview Summary (PTO-413), 

Paper No./Mail Date . 

3. □ Information Disclosure Statements (PTO-1449 or PTO/SB/08), 7. □ Examiner's Amendment/Comment 

Paper No./Mail Date , 

4. □ Examiner's Comment Regarding Requirement for Deposit 8. |3 Examiner's Statement of Reasons for Allowance 

of Biological Material 9. □ Other . 
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DETAILED ACTION 

Allowable Subject Matter 

Claims 1-78 are allowed. The following is an examiner's statement of reasons 
for allowance. As noted in the specification (especially at pages 1-3): The present 
invention can be used in conjunction with a hardware-or software based firewall in 
portable computing devices such as cellular telephones and wireless connected PDAS 
that is adapted to connect to the Intermit. The VPN mechanism of the present invention 
may also be implemented in software or a combination of hardware and software. 
Thus, the VPN mechanism can be used to achieve, for example, secure branch office 
connectivity over the WAN, secure remote access over the WAN or securing e- 
commerce transactions over the WAN. The VPN mechanism comprises a security 
association database (SAD) and relate circuitry that is adapted to provide the 
necessary parameters to implement the security specifications for encryption/decryption 
and authentication. Each security association (SA) entry in the database comprises all 
the parameters that are necessary to receive and transmit VPN packets according to 
the specification. The invention performs security association (SA) related processing 
on an input packet stream. Note that the input packet stream may comprise both 
inbound and outbound packets. Typically, the invention is positioned between a WAN 
(i.e. the Internet) and a LAN. In this case, the WN mechanism is operative to filter both 
inbound packets sent for the WAN to the LAN and outbound packets sent from the LAN 
to the WAN. The VPN mechanism of the present invention is operative to maintaiin a 
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secure parameter table referred to as the SAD for storing the security related 
parameters related to one way connection. For a two way connection, two SAs need to 
be created. New security associations are added to the SA database and, once created, 
subsequent packets associate with this SA are processed in accordance with the 
parameters stored in the database for the particular SA. Depending on the packet and 
the SA parameters, the packet may be encrypted, decrypted, authenticated or dropped. 
Note that a packet is allowed only if the packet conforms to the security as specified in 
the SA database. The prior art did not teach or suggest the particular features of the 
claims. 

Conclusion 

Points of Contact 

Any comments considered necessary by applicant must be submitted no later 
than the payment of the issue fee and, to avoid processing delays, should preferably 
accompany the issue fee. Such submissions should be clearly labeled "Comments on 
Statement of Reasons for Allowance." 

Any response to this action should be mailed to: 



Commissioner of Patents and Trademarks 
Washington, D.C. 20231 
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or faxed to: 
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(703) 746-7239, (for formal communications intended for entry) 
Or: 

(703) 746-5606 (for informal or draft communications, please label "PROPOSED" or 
"DRAFT") 

Hand-delivered responses should be brought to Crystal Park II, 2121 Crystal Drive, 
Arlington. VA., Sixth Floor (Receptionist). 

Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to David Jung whose telephone number is (571 ) 272-3838 
or Greg Morse whose telephone number is (571 ) 272-3836. 



David Jung 
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